Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a640e1d-e1f9-4e69-bf7c-e9e7a5baf924.roa
File:                     0a640e1d-e1f9-4e69-bf7c-e9e7a5baf924.roa (raw, json)
Hash identifier:          uup7WimQAozPBqCamc4bRyzYPlsoRl2QMQI8muFc2Eo=
Subject key identifier:   43:1B:E6:53:BB:AB:80:55:E1:C3:43:8A:FC:FC:2F:DA:B7:99:C1:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6823D195906102E21DBC9A07C3BC754137275EDD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a640e1d-e1f9-4e69-bf7c-e9e7a5baf924.roa
Signing time:             Thu 10 Sep 2026 01:31:13 +0000
ROA not before:           Thu 10 Sep 2026 01:31:13 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:11b1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:d1:95:90:61:02:e2:1d:bc:9a:07:c3:bc:75:41:37:27:5e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 10 01:31:13 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=0655bc5708dfbefb746952d97e2c188eb8fc06192b1625876901f368baeafd34, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:7c:40:87:92:52:36:85:4a:13:99:ef:68:
                    60:de:e0:08:ed:86:aa:f7:2f:e9:a9:e0:2f:dd:19:
                    0d:87:fd:4b:cf:b7:92:43:3c:1c:ac:97:34:16:1c:
                    68:fe:aa:44:1a:96:14:f3:9e:38:de:9d:14:44:e3:
                    d3:2b:33:2a:5f:4e:bd:d9:c8:84:37:b6:b5:11:06:
                    7e:a3:06:63:6c:b9:59:70:b2:89:1c:f0:93:11:a4:
                    af:ca:a8:44:48:aa:6d:98:fc:1e:ce:b3:92:0e:f8:
                    c7:c1:00:2b:b9:36:4a:2b:5a:2c:62:7a:2f:1a:e1:
                    7e:62:d9:13:b8:19:62:a0:cb:62:b0:a2:94:38:ae:
                    ad:ec:9d:79:94:49:85:bc:2f:12:43:8a:a5:d5:30:
                    21:a2:7b:1c:54:cd:59:e8:11:66:85:04:88:64:d3:
                    de:45:36:f6:37:3a:29:87:29:6b:23:68:7a:77:7b:
                    5a:5c:0f:20:73:58:1d:c6:46:ac:9f:e6:5b:d0:28:
                    19:e2:d6:c6:eb:28:a0:b7:fd:15:84:59:47:ac:fd:
                    66:1b:9b:da:94:fd:b0:46:f2:2e:20:32:92:7d:1e:
                    e6:70:97:a5:d0:56:07:f3:89:7f:e3:2b:19:6d:9d:
                    cd:b6:57:0f:45:9b:31:49:ab:4e:c7:b4:d8:51:20:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1B:E6:53:BB:AB:80:55:E1:C3:43:8A:FC:FC:2F:DA:B7:99:C1:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0a640e1d-e1f9-4e69-bf7c-e9e7a5baf924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:11b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:54:e5:0e:a8:44:5b:80:f2:b6:ad:59:5b:0e:63:06:ec:65:
         4a:08:4c:16:18:69:4e:27:b3:96:cd:88:41:14:df:89:39:ff:
         f0:2e:c8:fb:0f:37:ba:59:f9:80:90:31:cf:aa:1a:31:9b:46:
         a6:9c:77:20:01:e9:51:d0:63:e7:26:d6:a5:73:96:e3:37:14:
         25:44:25:e1:0e:7d:e7:d5:ca:88:49:27:03:04:1a:08:97:2a:
         1e:d5:fc:43:5a:ca:83:7e:76:ca:cc:29:56:82:8d:8b:a8:97:
         18:34:37:f5:8a:2b:a2:bf:1d:39:0d:e1:5c:ae:2c:73:4a:76:
         f1:28:5d:48:23:7f:37:c7:b2:47:b4:2d:52:35:9a:57:0a:50:
         b8:7d:44:49:34:1e:ea:0f:c6:64:ee:4c:17:fb:63:c1:e5:68:
         21:2c:b9:04:aa:16:1b:e5:39:a3:b2:63:18:89:05:a6:c9:5b:
         73:ae:49:78:69:1a:f3:0c:be:6c:fc:6f:fb:5b:8d:6d:a1:86:
         e7:96:d5:c1:e8:29:e9:4d:55:8e:12:87:6d:4b:4b:73:27:50:
         26:a0:b3:cd:8c:7c:68:ad:bf:d5:07:ec:30:c5:ca:36:17:0f:
         4b:09:7b:26:51:13:5f:85:6c:66:ba:4a:02:72:e0:d7:ae:eb:
         60:68:bf:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUaCPRlZBhAuIdvJoHw7x1QTcnXt0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwOTEwMDEzMTEzWhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjU1YmM1NzA4ZGZiZWZiNzQ2OTUyZDk3ZTJjMTg4ZWI4
ZmMwNjE5MmIxNjI1ODc2OTAxZjM2OGJhZWFmZDM0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh7nxAh5JSNoVKE5nvaGDe4Ajthqr3L+mp4C/dGQ2H/UvP
t5JDPByslzQWHGj+qkQalhTznjjenRRE49MrMypfTr3ZyIQ3trURBn6jBmNsuVlw
sokc8JMRpK/KqERIqm2Y/B7Os5IO+MfBACu5NkorWixiei8a4X5i2RO4GWKgy2Kw
opQ4rq3snXmUSYW8LxJDiqXVMCGiexxUzVnoEWaFBIhk095FNvY3OimHKWsjaHp3
e1pcDyBzWB3GRqyf5lvQKBni1sbrKKC3/RWEWUes/WYbm9qU/bBG8i4gMpJ9HuZw
l6XQVgfziX/jKxltnc22Vw9FmzFJq07HtNhRICERAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQxvmU7urgFXhw0OK/Pwv2reZweEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzBhNjQwZTFkLWUxZjktNGU2OS1iZjdjLWU5ZTdhNWJhZjkyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAJAAEbEwDQYJKoZIhvcNAQELBQADggEBAClU5Q6oRFuA8ratWVsOYwbs
ZUoITBYYaU4ns5bNiEEU34k5//AuyPsPN7pZ+YCQMc+qGjGbRqacdyAB6VHQY+cm
1qVzluM3FCVEJeEOfefVyohJJwMEGgiXKh7V/ENayoN+dsrMKVaCjYuolxg0N/WK
K6K/HTkN4VyuLHNKdvEoXUgjfzfHske0LVI1mlcKULh9REk0HuoPxmTuTBf7Y8Hl
aCEsuQSqFhvlOaOyYxiJBabJW3OuSXhpGvMMvmz8b/tbjW2hhueW1cHoKelNVY4S
h21LS3MnUCags82MfGitv9UH7DDFyjYXD0sJeyZRE1+FbGa6SgJy4Neu62Bov7o=
-----END CERTIFICATE-----
Generated at Mon Sep 21 04:23:20 2026 by rpki-client